WEST Search History for Application 09920995 



Creation Date: 2008081410:23 



Query 


DB 


Op. 


Plur. 


Thes. 


Date 


((supervisor$2 or privileged or protect$3) near mode) with 
(switch$3 or without or re$lcompil$5 or re$llink$3) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump$3 and (((supervisor$2 or privileged or protect$3) near 
mode) with (switch$3 or without or re$lcompil$5 or 
re$llink$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


emulat$3 and (jump$3 and ((supervisor$2 or privileged or 
protect$3) near mode) with (switch$3 or without or 
re$lcompil$5 or re$llink$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and (emulat$3 and jump$3 and ((supervisor$2 or 
privileged or protect$3) near mode) with (switch$3 or 
without or re$lcompil$5 or re$llink$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (kernel and emulat$3 and jump$3 and 
((supervisor$2 or privileged or protect$3) near mode) with 
(switch$3 or without or re$lcompil$5 or re$llink$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(kernel or system or privileged) near mode and (user or 
application) near mode 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 


OR 






08-14-2008 
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DWPI, 
TDBD 










(jump$3 or branch$3) with (system adj call) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((kernel or system or privileged) near mode and (user or 
application) near mode ) and ((jump$3 or branch$3) with 
(system adj call) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


TRACE near instruction 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call) same (((supervisor$2 or privileged or 
protect$3) near mode) or (user or application) near mode) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(TRACE near instruction ) and ((system adj call) same 
(((supervisor$2 or privileged or protect$3) near mode) or 
(user or application) near mode) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((jump$3 or branch$3) and interrupt$3) and (TRACE near 
instruction ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call) and (((jump$3 or branch$3) and 
interrupt$3) and TRACE near instruction ) 


PGPB, 
USPT, 


OR 
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USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










emulat$3 and (TRACE near instruction ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (emulat$3 and TRACE near 
instruction ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system near call or privilege or (supervisors 1 near mode)) 
with (error or fault or violat$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(juump$3 or interrupt$4) and ((system near call or privilege 
or (supervisors 1 near mode)) with (error or fault or 
violat$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and ((juump$3 or interrupt$4) and (system 
near call or privilege or (supervisors 1 near mode)) with 
(error or fault or violat$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


operating adj system and kernel and (@pd<20000801 and 
(juump$3 or interrupt$4) and (system near call or privilege 
or (supervisors 1 near mode)) with (error or fault or 
violat$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 
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TDBD 










emulat$3 and ((system near call or privilege or 
(supervisors 1 near mode)) with (error or fault or violat$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (emulat$3 and (system near call or 
privilege or (supervisors 1 near mode)) with (error or fault 
or violat$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system near call or access near (control or memory)) same 
(in$ldirect$3 or re$ldirect$3 or substitut$3 or thunk$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump$3 and interrupt$3) and ((system near call or access 
near (control or memory)) same (in$ldirect$3 or 
re$ldirect$3 or substitut$3 or thunk$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and ((jump$3 and interrupt$3) and (system 
near call or access near (control or memory)) same 
(in$ldirect$3 or re$ldirect$3 or substitut$3 or thunk$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


operating adj system and kernel and (@pd<20000801 and 
(jump$3 and interrupt$3) and (system near call or access 
near (control or memory)) same (in$ldirect$3 or 
re$ldirect$3 or substitut$3 or thunk$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system near call with intercept$3 


PGPB, 
USPT, 
USOC, 


OR 
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JPAB, 
DWPI, 
TDBD 










(jump$3 and interrupt$3) and (system near call with 
intercept$3 ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system near call same intercept$3 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump$3 and interrupt$3) and (system near call same 
intercept$3 ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system near call same (substitut$3 or replac$7) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump$3 and interrupt$3) and (system near call same 
(substitut$3 or replac$7) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and ((jump$3 and interrupt$3) and system 
near call same (substitut$3 or replac$7) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 
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system adj call same emulat$3 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (system adj call same emulat$3 ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


emulat$3 with (privilege$l or supervisors 1) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (emulat$3 with (privilege$l or 
supervisors 1) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


($3direct$2 with (interrupt$3 or jump$3)) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(privileged or $4privileged) and (($3direct$2 with 
(interrupt$3 or jump$3)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(kernel and operating adj system) and ((privileged or 
qjH-pnviiegea ) ana jaireciq>z wun ^imerrupr$ j or jump$ d ) ) 

) 


PGPB, 

USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










@pd<20000801 and ((kernel and operating adj system) and 
(privileged or $4privileged) and ($3direct$2 with 
(interrupt$3 or jump$3)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


($3direct$2 with (interrupt$3 and jump$3)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (($3direct$2 with (interrupt$3 and 
jump$3)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(kernel and operating adj system) and (@pd<20000801 and 
($3direct$2 with (interrupt$3 and jump$3)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


5469556.pn. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


6003123.pn. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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(direct$3 and in$l direct) near (processing or execut$3) near 
mode 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










(direct$3 and in$l direct) with(processing or execut$3) near 
mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system near call same (direct$2 and in$ldirect$2) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(kernel and operating adj system) and (system near call 
same (direct$2 and in$ldirect$2) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((access$3 or (system or function) near call)) near 
memory) with (detour or trampoline or indirect$2 or 
replace$5 or substitut$3 or intercept$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump and interrupt$3) and ((((access$3 or (system or 
function) near call)) near memory) with (detour or 
trampoline or indirect$2 or replace$5 or substitut$3 or 
intercepts 3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pD<20000801 and ((jump and interrupt$3) and 
(((access$3 or (system or function) near call)) near 
memory) with (detour or trampoline or indirect$2 or 
replace$5 or substitut$3 or intercept$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 






08-14-2008 



Creation Date: 2008081410:23 





JPAB, 
DWPI, 
TDBD 










(kernel or operating adj system) and (@pD<20000801 and 
(jump and interrupt$3) and (((access$3 or (system or 
function) near call)) near memory) with (detour or 
trampoline or indirect$2 or replace$5 or substitut$3 or 
intercept$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) with (detour or trampoline 
or indirect$2 or replace$5 or substitut$3 or intercept$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pD<20000801 and (((system or function) near call) with 
(detour or trampoline or indirect$2 or replace$5 or 
substitut$3 or intercept$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump and interrupt$3) and (@pD<20000801 and ((system 
or function) near call) with (detour or trampoline or 
indirect$2 or replace$5 or substitut$3 or intercept$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) near access near memory 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) with access near memory 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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(((system or function) near call) with (detour or trampoline 
or indirect$2 or replace$5 or substitut$3 or intercept$3) ) 
and (((system or function) near call) with access near 
memory ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










•5548694'.pn. 


USPT 


OR 






08-14-2008 


'5161226'.pn. 


USPT 


OR 






08-14-2008 


((system or function) near call) with (detour or trampoline 
or indirect$2 or replace$5 or substitut$3 or intercept$3) 
near (code or program or component or module) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


access near memory and (((system or function) near call) 
with (detour or trampoline or indirect$2 or replace$5 or 
substitut$3 or intercept$3) near (code or program or 
component or module) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(726/???or713/???).ccls. and ((((access$3 or (system or 
function) near call)) near memory) with (detour or 
trampoline or indirect$2 or replace$5 or substitut$3 or 
intercepts 3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(726/???or713/???).ccls. and (((system or function) near 
call) with access near memory ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system near call) with access near memory 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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(726/???or713/???).ccls. and ((system near call) with access 
near memory ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










(system near call) and operating adj system 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


access near memory and ((system near call) and operating 
adj system ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


call near2 (detour or trampoline or indirect$2 or replace$5 
or substitut$3 or intercept$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(access near memory and (system near call) and operating 
adj system ) and (call near2 (detour or trampoline or 
indirect$2 or replace$5 or substitut$3 or intercept$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(726/???or713/???).ccls. and (access near memory and 
(system near call) and operating adj system and call near2 
(detour or trampoline or indirect$2 or replace$5 or 
substitut$3 or intercept$3) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


memory near2 (violation or attack$3 or error or problem) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










protect$3 near operating adj system and (memory near2 
(violation or attack$3 or error or problem) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call and (protect$3 near operating adj system 
and memory near2 (violation or attack$3 or error or 
problem) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


($3trusted or $3secure) near (application or code or 
program or module or component or software) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


indirect near system near call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


indirect with system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with jump near instruction 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (determin$3 near (mode or domain)) 




OR 
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PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










system adj call with (privileg$2 near (mode or domain)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with ((privileg$2 or secure) near memory) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with ((privileg$2 or secure) with memory) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (intercept$3 or detour or $3direct) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump or interrupt) near instruction 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call with (intercept$3 or detour or $3direct) ) 
and ((jump or interrupt) near instruction ) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 






08-14-2008 



Creation Date: 2008081410:23 



13 





JPAB, 
DWPI, 
TDBD 










'6604123'.pn. 


USPT 


OR 






08-14-2008 


'6546546'.pn. 


USPT 


OR 






08-14-2008 


'6542919'.pn. 


USPT 


OR 






08-14-2008 


'6463549'.pn. 


USPT 


OR 






08-14-2008 


'6360244'.pn. 


USPT 


OR 






08-14-2008 


'6360244'.pn. 


USPT 


OR 






08-14-2008 


'6360244'.pn. 


USPT 


OR 






08-14-2008 


'6317868'.pn. 


USPT 


OR 






08-14-2008 


'6317868'.pn. 


USPT 


OR 






08-14-2008 


'6256657'.pn. 


USPT 


OR 






08-14-2008 


'6199152'.pn. 


USPT 


OR 






08-14-2008 


re$l vector with system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


re$l vector with system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(alternat$5 or replac$6 or substitut$3) with system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((jump or interrupt) near instruction ) and ((alternat$5 or 
replac$6 or substitut$3) with system adj call ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 


OR 
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DWPI, 
TDBD 










protect$3 with (os or operating adj system) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(protect$3 with (os or operating adj system) ) and 
(((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump or interrupt) and (protect$3 with (os or operating adj 
system) and ((intercept$3 or detour or $3direct$3 or 
re$lvector$3 or alternat$5 or replac$6 or substitut$3)) with 
system adj call ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(713/???or726/???).ccls. and ((jump or interrupt) and 
protect$3 with (os or operating adj system) and 
((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and((713/???or726/???).ccls. and Gump or 
interrupt) and protect$3 with (os or operating adj system) 
and ((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and ((jump or interrupt) and protect$3 with 
(os or operating adj system) and ((intercept$3 or detour or 


PGPB, 
USPT, 


OR 
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$3direct$3 or re$lvector$3 or alternat$5 or replac$6 or 
substitut$3)) with system adj call ) 


USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










switch$3 with (($3privileg$3 or $3secure) near (domain or 
mode)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call ) 
and (switch$3 with (($3privileg$3 or $3secure) near 
(domain or mode)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(replac$6 or substitut$3) with access near memory 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call and ((replac$6 or substitut$3) with access 
near memory ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with access near memory 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump or interrupt) and (system adj call with access near 
memory ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 
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TDBD 










system adj call with emulat$3 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


access near memory and (system adj call with emulat$3 ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with augment$6 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


5109515[uref] 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (monitor$3 or trac$4) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (access or memory) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call with (monitor$3 or trac$4) ) and (system 
adj call with (access or memory) ) 


PGPB, 
USPT, 
USOC, 


OR 
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JPAB, 
DWPI, 
TDBD 










(jump or interrupt) and (system adj call with (monitor$3 or 
trac$4) and system adj call with (access or memory) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and ((jump or interrupt) and system adj 
call with (monitor$3 or trac$4) and system adj call with 
(access or memory) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((intercept$3 or detour or $3direct$3 or re$lvector$3 or 
alternat$5 or replac$6 or substitut$3)) with system adj call ) 
and (system adj call with (monitor$3 or trac$4) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (((intercept$3 or detour or $3direct$3 
or re$lvector$3 or alternat$5 or replac$6 or substitut$3)) 
with system adj call and system adj call with (monitor$3 or 
trac$4) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (access or memory) with (valid$4 or 
verif$7 or determin$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (access or memory) with (error or 
fail$3 or valid$4 or verif$7 or determin$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 
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@pd<20000801 and (system adj call with (access or 
memory) with (error or fail$3 or valid$4 or verif$7 or 
determin$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 with (($3priviledg$3) near mode) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 with (($3privileg$3) near mode) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump and (determin$3 with (($3privileg$3) near mode) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 with (($3privileg$3 or secure) near domain) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 with (($3privileg$3 or $3secure) near thread) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((un$lprivileg$3 or un$l secure) near (domain or mode)) 
with (detour$3 or re$ldirect$3 or trampoline or 
intercept$3) 


PGPB, 

USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










(un$lprivileg$3 or un$l secure) with (detour$3 or 
re$ldirect$3 or trampoline or intercept$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (($3privileg$3 or $3 secure) near (mode 
or domain or thread)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call with (($3privileg$3 or $3 secure) near (mode 
or domain or thread or code)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(interrupt$3 or exception) with system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((interrupt$3 or exception) with system adj call ) and 
(($3privileg$3 or $3 secure) near (mode or domain or thread 
or code)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(detour$3 or re$ldirect$3 or trampoline or intercept$3 or 
jump$3) and ((interrupt$3 or exception) with system adj 
call and (($3privileg$3 or $3secure) near (mode or domain 
or thread or code)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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@pd<20000801 and ((detour$3 or re$ldirect$3 or 
trampoline or intercept$3 or jump$3) and (interrupt$3 or 
exception) with system adj call and (($3privileg$3 or 
$3secure) near (mode or domain or thread or code)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










memory near allocat$3 with ((proection or privileged or 
unprivileged or non$l privileged) near (area or space or 
domain or mode)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


memory near allocat$3 with ((proection or privileged or 
unprivileged or non$l privileged)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


access$3 near ((proection or privileged or unprivileged or 
non$ lprivileged) near (memory or space or area or domain 
or mode)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(indirect$2 or direct$2) near interrupt$3 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(indirect$2 and direct$2) near interrupt$3 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(indirect$2) near interrupt$3 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










((proection or privileged or unprivileged or 

non$ lprivileged) near (memory or space or area or domain 

or mode)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((indirect$2) near interrupt$3 ) and (((proection or 
privileged or unprivileged or non$ lprivileged) near 
(memory or space or area or domain or mode)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call and ((indirect$2) near interrupt$3 ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 near ((protection or privileged or unprivileged 
or non$ lprivileged) near (memory or space or area or 
domain or mode)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


'6003123'.pn. 


USPT 


OR 






08-14-2008 


'5581722'.pn. 


USPT 


OR 






08-14-2008 


'5280614'.pn. 


USPT 


OR 






08-14-2008 


jump$3 near ((protection or privileged or unprivileged or 
non$ lprivileged) near (memory or space or area or domain 
or mode)) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(726/27) eels 


USPT, 
USOC, 


OR 
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JPAB, 
DWPI, 
TDBD 










(710/261 1710/262 1710/263 1710/264 1710/265 
I710/266).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((726/27).ccls. ) or ((710/261 1710/262 1710/263 1710/264 
1710/265 I710/266).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


trap$4 near ((system or function) near call) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((protection or privileged or unprivileged or 

non$ lprivileged) near (memory or space or area or domain 

or mode)) and (trap$4 near ((system or function) near call) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(monitor$3 or track$3 or trac$3) near (((function or system) 
near call) or invok$3 or invocat$3) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


6604123.pn. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 
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((direct or indirect) near ((system or function) near call)) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and (((direct or indirect) near ((system or function) 
near call)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((direct and indirect) near call) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(protection or non$l privileged or unprivileged) near mode 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((direct and indirect) near call) ) and ((protection or 
non$ lprivileged or unprivileged) near mode ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


current near processing near mode 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and (current near processing near mode ) 


PGPB, 

USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










((system or function) near call) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(current near processing near mode ) and (((system or 
function) near call) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 near current near mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and (determin$3 near 
current near mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(invok$3 or invocat$3) near (protection or non$l privileged 
or unprivileged) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


20030140245 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


6175916 




OR 
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PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










6175916.pn. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and (6175916.pn. ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and ((invok$3 or 
invocat$3) near (protection or non$lprivileged or 
unprivileged) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 near (invok$3 or invocat$3) near mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((hook$3 or intercept$3) with (((system or function) near 
call) or (invok$3 or invocat$3))) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










(709/213 1709/214 1709/215 l709/216).ccls. (((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(709/213 1709/214 1709/215 l709/216).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(71 0/200). eels. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(711/111 I711/163).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(712/214 I712/215).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(713/164 1713/165 1713/166 I713/167).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(707/9).ccls. 




OR 
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PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










(717/124 I717/127).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(718/102 1718/104 1718/106 1718/107 I718/108).ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) ) or ((709/213 1709/214 1709/215 
l709/216).ccls. ) or ((710/200).ccls. ) or ((711/111 
171 1/163). eels. ) or ((712/214 1712/215). eels. ) or ((713/164 
1713/165 1713/166 I713/167).ccls. ) or ((707/9).ccls. ) or 
((717/124 I717/127).ccls. ) or ((718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((hook$3 or intercept$3) with (((system or function) near 
call) or (invok$3 or invocat$3))) ) and ((709/213 1709/214 
1709/215 l709/216).ccls. ((hook$3 or intercept$3) with 
((system or function) near call) or (invok$3 or invocat$3)) 
or (709/213 1709/214 1709/215 l709/216).ccls. or 
(71 0/200). ecls. or (711/111 171 1/163). eels, or (712/214 
I712/215).ccls. or (713/164 1713/165 1713/166 
I713/167).ccls. or (707/9).ccls. or (717/124 I717/127).ccls. 
or (718/102 1718/104 1718/106 1718/107 I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels. ) or 
((710/200).ccls. ) or ((711/111 I711/163).ccls. ) or 
((712/214 I712/215).ccls. ) or ((713/164 1713/165 1713/166 
1713/167). eels. ) or ((707/9). ecls. ) or ((717/124 
I717/127).ccls. ) or ((718/102 1718/104 1718/106 1718/107 
I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((hook$3 or intercept$3) with (((system or function) near 


PGPB, 


OR 
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call) or (invok$3 or invocat$3))) ) and ((709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
171 1/163). eels, or (712/214 1712/215). eels, or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) 


USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 










(protect$3 or non$l privileged or unprivileged) and 
(((hook$3 or intercept$3) with (((system or function) near 
call) or (invok$3 or invocat$3))) and (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels, or (711/111 
171 1/163). eels, or (712/214 1712/215). eels, or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 

DWPI, 
TDBD 


OR 






08-14-2008 


system adj call 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(privileged and unprivileged) near mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call ) and ((privileged and unprivileged) near 
mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(privileged and (non$l privileged or unprivileged)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call ) and ((privileged and (non$l privileged or 
unprivileged)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










kernel and (system adj call and (privileged and 
(non$l privileged or unprivileged)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump near instruction 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call and (privileged and (non$l privileged or 
unprivileged)) ) and (jump near instruction ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$5 near processing near mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump near instruction ) and (determin$5 near processing 
near mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call ) and (determin$5 near processing near 
mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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((privileged and (non$l privileged or unprivileged)) ) and 
(determin$5 near processing near mode ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










(privileged or (non$l privileged or unprivileged)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(determin$5 near processing near mode ) and ((privileged 
or (non$l privileged or unprivileged)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 near (privileged or non$l privileged or 
unprivileged) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system adj call ) and (determin$3 near (privileged or 
non$ lprivileged or unprivileged) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) with((privileged or 

non$ lprivileged or unprivileged) near (memory or address 

or space)) 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










((privileged or non$l privileged or unprivileged) near 
(memory or address or space)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and (((privileged or 
non$ lprivileged or unprivileged) near (memory or address 
or space)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


determin$3 near mode 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and (determin$3 near 
mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(jump near instruction ) and (((system or function) near 
call) and determin$3 near mode ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) with determin$3 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 






OR 
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kernel and (((system or function) near call) with determin$3 
) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










jump near instructiona and (kernel and ((system or 
function) near call) with determin$3 ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump near instruction and (kernel and ((system or function) 
near call) with determin$3 ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) near determin$3 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and (((system or function) near call) near determin$3 
) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) and ((monitor$3 or track$3 or 
trac$3) near (((function or system) near call) or invok$3 or 
invocat$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 






08-14-2008 


kernel and ((709/213 1709/214 1709/215 1709/2 16). eels . 


PGPB, 


OR 
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((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and (monitor$3 or track$3 or 
trac$3) near (((function or system) near call) or invok$3 or 
invocat$3) ) 


USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 










((invok$3 or invocat$3 or call$3) near (direct$2 or 
indirect$2)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((invok$3 or invocat$3 or call$3) near (direct$2 and 
indirect$2)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) ) and (((invok$3 or 
invocat$3 or call$3) near (direct$2 and indirect$2)) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) and (((system or function) near 
call) and ((invok$3 or invocat$3 or call$3) near (direct$2 
and indirect$2)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((privileged or non$l privileged or unprivileged) near 
(memory or address or space)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 



Creation Date: 2008081410:23 



34 



((privileged or non$l privileged or unprivileged) near 
(mode or memory or address or space)) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) and ((invok$3 or invocat$3 
or call$3) near (direct$2 and indirect$2)) ) anbd 
(((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((system or function) near call) and ((invok$3 or invocat$3 
or call$3) near (direct$2 and indirect$2)) ) and (((privileged 
or non$lprivileged or unprivileged or user or supervisor or 
system) near (mode or memory or address or space)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and (((system or function) near call) and ((invok$3 
or invocat$3 or call$3) near (direct$2 and indirect$2)) and 
((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) and (kernel and ((system or 
function) near call) and ((invok$3 or invocat$3 or call$3) 
near (direct$2 and indirect$2)) and ((privileged or 
non$ lprivileged or unprivileged or user or supervisor or 
system) near (mode or memory or address or space)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 
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((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) ) or ((709/213 1709/214 1709/215 
l709/216).ccls. ) or ((710/200).ccls. ) or ((711/111 
I711/163).ccls. ) or ((712/214 I712/215).ccls. ) or ((713/164 
1713/165 1713/166 I713/167).ccls. ) or ((707/9).ccls. ) or 
((717/124 I717/127).ccls. ) or ((718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(kernel and ((system or function) near call) and ((invok$3 
or invocat$3 or call$3) near (direct$2 and indirect$2)) and 
((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) ) and ((709/213 1709/214 1709/215 1709/21 6). ecls. 
((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump and (kernel and ((system or function) near call) and 
((invok$3 or invocat$3 or call$3) near (direct$2 and 
indirect$2)) and ((privileged or non$l privileged or 
unprivileged or user or supervisor or system) near (mode or 
memory or address or space)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((monitor$3 or control$4) near access) with ((system or 
function) near call) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) and (((monitor$3 or control$4) 
near access) with ((system or function) near call) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


jump adj instruction 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 
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JPAB, 
DWPI, 
TDBD 










(((system or function) near call) ) and (jump adj instruction 
) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) ) and (((system or function) near call) and jump adj 
instruction ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 1718/108). ecls. ) and (((privileged or 
non$ lprivileged or unprivileged or user or supervisor or 
system) near (mode or memory or address or space)) and 
((system or function) near call) and jump adj instruction ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


kernel and ((709/213 1709/214 1709/215 1709/2 16). eels . 
((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 1718/108). ecls. and ((privileged or 
non$ lprivileged or unprivileged or user or supervisor or 
system) near (mode or memory or address or space)) and 
((system or function) near call) and jump adj instruction ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((direct$2 or indirect$2) near (jump near instruction)) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 
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((system or function) near call) and (((direct$2 or 
indirect$2) near (jump near instruction)) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((direct$2 or indirect$2) near jump$3) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((system or function) near call) and (((direct$2 or 
indirect$2) near jump$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. ) and (((system or function) near 
call) and ((direct$2 or indirect$2) near jump$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) ) and ((709/213 1709/214 1709/215 1709/21 6). ecls. 
((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 I717/127).ccls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


$3direct$3 with system adj call 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 
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TDBD 










$3privilege near mode and ($3direct$3 with system adj call 
) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(system or privileged or kernel) near mode with (operating 
adj system and kernel) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


system adj call and ((system or privileged or kernel) near 
mode with (operating adj system and kernel) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (system adj call and (system or 
privileged or kernel) near mode with (operating adj system 
and kernel) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


(operating adj system and kernel) near (driver or code or 
software or program) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


privilege and ((operating adj system and kernel) near 
(driver or code or software or program) ) 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 






08-14-2008 


@pd<20000801 and (privilege and (operating adj system 
and kernel) near (driver or code or software or program) ) 


PGPB, 
USPT, 
USOC, 


OR 
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JPAB, 
DWPI, 
TDBD 










718/104.ccls. 


PGPB, 
USPT, 
USOC, 

JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


713/163.ccls. 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


713/1 64.ccls. 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


711/163.ccls. 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(/l//lz4 l/l //lz/).ccls. or (/ lo/ iUz I / 1 0/11)4 1 / lo/lUo 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) ) or 
(713/164.ccls. ) or (711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 


NO 




08-14-2008 


((supervisor$2 or privileged or protect$3) near mode) and 
((709/213 1709/214 1709/215 1709/2 16). eels . ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 


PGPB, 
USPT, 
USOC, 
EPAB, 


OR 


NO 
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l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). eels, or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


JPAB, 
DWPI, 
TDBD 










((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) and ((709/213 1709/214 1709/215 1709/21 6).ccls. 
((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(/i //iz4 l/l //iz/).ccls. or (/ io/ iUz I / io/i(J4 I / io/iUo 
I718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


@pd<20000801 and (((privileged or non$lprivileged or 
unprivileged or user or supervisor or system) near (mode or 
memory or address or space)) and (709/213 1709/214 
1709/215 l709/216).ccls. ((hook$3 or intercept$3) with 
((system or function) near call) or (invok$3 or invocat$3)) 
or (709/213 1709/214 1709/215 l709/216).ccls. or 
(71 0/200). ecls. or (711/111 I711/163).ccls. or (712/214 
I712/215).ccls. or (713/164 1713/165 1713/166 
1713/167). ecls. or (707/9). ecls. or (717/124 1717/127). ecls. 
or (718/102 1718/104 1718/106 1718/107 I718/108).ccls. and 
((system or function) near call) and ((direct$2 or indirect$2) 
near jump$3) or 713/164.ccls. or 711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


@pd<20000801 and (((supervisor$2 or privileged or 
protect$3) near mode) and (709/213 1709/214 1709/215 
l709/216).ccls. ((hook$3 or intercept$3) with ((system or 
function) near call) or (invok$3 or invocat$3)) or (709/213 
1709/214 1709/215 1709/21 6).ccls. or (7 10/200). ecls. or 
(711/111 I711/163).ccls. or (712/214 17 12/21 5).ccls. or 
(713/164 1713/165 1713/166 I713/167).ccls. or (707/9).ccls. 
or (717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


(((direct or indirect) near ((system or function) near call)) ) 
and (@pd<20000801 and ((supervisor$2 or privileged or 
protect$3) near mode) and (709/213 1709/214 1709/215 
l709/216).ccls. ((hook$3 or intercept$3) with ((system or 
function) near call) or (invok$3 or invocat$3)) or (709/213 
1709/214 1709/215 1709/21 6).ccls. or (7 10/200). ecls. or 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 


OR 


NO 
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(711/111 I711/163).ccls. or (712/214 17 12/21 5).ccls. or 
(713/164 1713/165 1713/166 I713/167).ccls. or (707/9).ccls. 
or (717/124 1717/127). eels, or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


TDBD 










(((direct or indirect) near ((system or function) near call)) ) 
and (@pd<20000801 and ((privileged or non$lprivileged 
or unprivileged or user or supervisor or system) near (mode 
or memory or address or space)) and (709/213 1709/214 
1709/215 l709/216).ccls. ((hook$3 or intercept$3) with 
((system or function) near call) or (invok$3 or invocat$3)) 
or (709/213 1709/214 1709/215 l709/216).ccls. or 
(71 0/200). eels, or (711/111 I711/163).ccls. or (712/214 
I712/215).ccls. or (713/164 1713/165 1713/166 
I /i 51 lo /).ccls. or (/U//y).ccls. or (/i // iz4 1 / I // iz7).ccls. 
or (718/102 1718/104 1718/106 1718/107 I718/108).ccls. and 
((system or function) near call) and ((direct$2 or indirect$2) 
near jump$3) or 713/164.ccls. or 71 1/163. eels. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


((direct or indirect) near memory) and (@pd<20000801 and 
((privileged or non$l privileged or unprivileged or user or 
supervisor or system) near (mode or memory or address or 
space)) and (709/213 1709/214 1709/215 l709/216).ccls. 
((hook$3 or intercept$3) with ((system or function) near 
call) or (invok$3 or invocat$3)) or (709/213 1709/214 
1709/215 l709/216).ccls. or (7 10/200). eels . or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 


((direct or indirect) near memory) and (@pd<20000801 and 
((supervisor$2 or privileged or protect$3) near mode) and 
(709/213 1709/214 1709/215 l709/216).ccls. ((hook$3 or 
intercept$3) with ((system or function) near call) or 
(invok$3 or invocat$3)) or (709/213 1709/214 1709/215 
l709/216).ccls. or (710/200).ccls. or (711/111 
I711/163).ccls. or (712/214 I712/215).ccls. or (713/164 
1713/165 1713/166 I713/167).ccls. or (707/9).ccls. or 
(717/124 1717/127). ecls. or (718/102 1718/104 1718/106 
1718/107 I718/108).ccls. and ((system or function) near call) 
and ((direct$2 or indirect$2) near jump$3) or 713/164.ccls. 
or711/163.ccls. ) 


PGPB, 
USPT, 
USOC, 
EPAB, 
JPAB, 
DWPI, 
TDBD 


OR 


NO 




08-14-2008 



Creation Date: 2008081410:23 



42 



